CVE-2023-0217

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allow an attacker to cause a denial of service attack. The TLS implementation in OpenSSL does not call this function but applications might call the function if there are additional security requirements imposed by standards such as FIPS 140-3.

• CWE-476
• CWE-476

• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096
• https://security.gentoo.org/glsa/202402-08
• https://www.openssl.org/news/secadv/20230207.txtVendor Advisory
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=23985bac83fd50c8e29431009302b5442f985096
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
• https://security.gentoo.org/glsa/202402-08
• https://www.openssl.org/news/secadv/20230207.txtVendor Advisory

Published

Feb 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0210A bug affects the Linux kernel’s ksmbd NTLMv2 authentication…7.5
• CVE-2023-0212The Advanced Recent Posts WordPress plugin through 0.6.14 do…5.4
• CVE-2023-0213Elevation of privilege issue in M-Files Installer versions b…7.8
• CVE-2023-0214A cross-site scripting vulnerability in Skyhigh SWG in main …6.1
• CVE-2023-0215The public API function BIO_new_NDEF is a helper function us…7.5
• CVE-2023-0216An invalid pointer dereference on read can be triggered when…7.5
• CVE-2023-0219The FluentSMTP WordPress plugin before 2.2.3 does not saniti…5.4
• CVE-2023-0220The Pinpoint Booking System WordPress plugin before 2.9.9.2.…8.8
• CVE-2023-0221Product security bypass vulnerability in ACC prior to versio…4.4
• CVE-2023-0223An issue has been discovered in GitLab affecting all version…5.3
• CVE-2023-0224The GiveWP WordPress plugin before 2.24.1 does not properly …9.8
• CVE-2023-0225A flaw was found in Samba. An incomplete access check on dns…4.3